Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-zfEe0BU7SyL7_08ul0hKOhY3Qg.roa
File: 1-zfEe0BU7SyL7_08ul0hKOhY3Qg.roa (raw, json)
Hash identifier: CutiDscGLXAwr5q4jojYa93oSOksLy6I/mjqpHmcpTQ=
Subject key identifier: FB:37:C4:7B:40:54:ED:2C:8B:EF:FD:3C:BA:5D:21:28:E8:58:DD:08
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018B2486CD70F132F869126BB01CD82F782B
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-zfEe0BU7SyL7_08ul0hKOhY3Qg.roa
Signing time: Thu 12 Oct 2023 15:34:55 +0000
ROA not before: Thu 12 Oct 2023 15:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216167
IP address blocks: 203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:86:cd:70:f1:32:f8:69:12:6b:b0:1c:d8:2f:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 12 15:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb37c47b4054ed2c8beffd3cba5d2128e858dd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:31:2e:02:b6:ca:99:66:69:3e:46:5d:f2:
fd:5e:15:b0:25:21:e1:b6:23:5b:2e:ca:a4:39:7e:
39:a9:b9:7f:69:e2:cd:0c:b5:f2:d2:8a:7d:0e:bd:
99:b4:c1:25:e2:4a:10:c6:12:03:15:9f:40:c6:0f:
48:63:00:bb:f4:91:21:05:22:5f:a7:fa:57:e1:f5:
1b:f7:57:35:3a:74:f8:c8:8e:ee:3b:a0:87:56:bc:
9b:d3:d9:54:6d:36:2f:39:60:7a:71:6e:3e:a3:b9:
f3:33:7f:c3:2b:f4:ec:39:a9:28:2c:7a:26:58:3a:
88:a9:f8:7c:40:53:40:f5:b2:09:97:4e:35:b4:ec:
7e:34:cf:95:8d:36:db:ae:76:97:ff:40:66:1f:cc:
95:14:f4:bc:a1:20:72:7c:a5:2b:1f:00:4e:11:e4:
2b:31:68:6e:de:60:67:e3:0f:97:da:d3:a9:a9:e9:
06:c6:d7:b6:45:42:0d:83:0d:02:9e:8e:b8:cd:57:
37:bd:a8:bd:b2:a4:b5:1f:fc:4e:bf:5e:39:aa:7c:
8d:d0:71:96:82:d3:50:c0:f6:f2:d8:40:02:8f:57:
cd:5e:01:85:33:3f:6c:66:c0:20:f6:3d:bd:c4:69:
90:99:d1:49:b5:b7:8f:af:59:b6:f8:ca:a1:be:e3:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:C4:7B:40:54:ED:2C:8B:EF:FD:3C:BA:5D:21:28:E8:58:DD:08
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-zfEe0BU7SyL7_08ul0hKOhY3Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:b8:6a:aa:20:1e:c8:5c:c0:ce:0b:a2:0f:7d:06:ec:b0:32:
b6:7c:0e:1e:5e:de:42:43:d0:fe:6c:6c:fd:2f:f1:17:4c:53:
25:ce:cc:70:5f:a7:55:50:39:2f:f9:91:7b:f4:2c:28:0d:26:
cc:9d:92:d4:ca:c7:40:d1:08:5e:77:6b:ee:64:f7:b0:02:ac:
04:11:34:ad:e9:99:e3:94:a7:38:21:17:d4:a5:10:a8:5a:62:
90:fd:5c:f7:10:30:fd:01:44:f7:cf:1c:fa:a5:06:f1:bf:85:
6a:8d:44:88:62:fb:5c:19:f3:68:ae:7e:8f:2b:88:22:7d:7d:
1d:a4:dc:b9:40:ec:4d:b2:86:82:49:1d:66:37:b6:e7:ba:f0:
c4:46:9b:5d:94:e0:e5:52:82:26:4a:cc:66:8e:78:e2:38:7b:
c2:81:0c:14:c6:67:d6:2b:c1:37:4b:ed:85:b3:72:81:16:c8:
9a:b9:cb:1f:2e:72:e7:3f:30:b6:c3:63:2f:38:69:28:e8:7f:
48:36:50:4a:c5:ff:a4:4c:ec:60:b7:0c:9b:4a:74:5c:d7:0c:
34:51:95:ad:74:f3:a1:30:c2:e7:c8:3d:49:5b:52:2d:a5:fb:
b3:f4:e2:ba:4e:c2:a8:0b:60:53:c5:b5:d7:0a:8b:8c:c9:68:
9b:99:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:19:35 2025 by rpki-client